Robert Rockstroh

Experienced Cyber Security Incident Response Lead with 15+ years in ICT, specialising in incident response, infrastructure and security optimization. Strong technical acumen, leadership, and strategic planning skills. Adept at solving complex problems, mentoring teams, and driving innovative solutions with automation, workflows, and strategic planning.

• GIAC Certified Incident Handler (GCIH)
• GIAC Certified Forensic Analyst (GCFA)
• ITIL V3 Certified
• Bluecoat Certified Proxy Administrator (BCCPA)
• SANS Security Essentials Bootcamp (SEC401)
• Studying: GIAC Cloud Threat Detection (GCTD)

**Phishing Investigation Automation**

Designed and deployed logic to automate phishing triage using Proofpoint TAP/TRAP results and ChatGPT. Built logic to assess inbox dwell time and detect whether malicious emails had been contained before user interaction. Dramatically reduced manual investigation time and improved MTTR.

**Vulnerability Management Enrichment App**

Built a Python-based app using ChatGPT to assess CVE exploitability and applicability based on CVSS data, environment context, and threat landscape. Improved patch prioritization for security and infrastructure teams.

**AI-Powered CVE Analysis**

Developed a second Python tool to query OpenAI and summarize CVEs with contextual relevance to internal assets. Enabled the team to understand obscure vulnerabilities and prioritize patching with confidence.

**Business Support via Power Automate**

Created a Microsoft Power Automate workflow to manage gift register submissions, freeing up compliance staff from manual processes. Demonstrated proactive support of business functions outside cyber remit as part of Lean In objectives.

**Leadership in Agile & Collaboration Tools**

Regularly use Jira and Confluence to document security playbooks, manage sprints, and drive continuous improvement. Established transparent and efficient collaboration processes with stakeholders across IT and business units.